Extracted

• • Target
    SC_TR11670000.exe
  • Size 1.3MB
  • SHA256 3d10f4aa567f3d3c63bff345a5935ebe6365ff607d79155bdce2bc2d852b6f7f
  • MD5 077d10ca5000d51dd50d9538123815d2
  • SHA1 e11c25ea4924c9cc5a121044f38bfeca955d6a0c
  • SHA512 f9733f97558f1189e4b9e7341db30dfedcd47b62b0726b8377c7b22ff7bf67f8aaea0ebdb4bbde070a516c5e8dfa63939a67778bdb778d697f8392acebbb5e91
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2